Technical Information

Brief overview of the risk:
A remote code execution vulnerability exists in the Domain Name System (DNS) Server Service in all supported server versions of Windows that could allow an attacker who successfully exploited this vulnerability to take complete control of the affected system.
Detailed Information on the risk:
This bulletin covers patches for a vulnerability in the management RPC interface for Microsoft DNS Server that was discovered in the wild last month. Exploits for this vulnerability have since been widely distributed, although in most networks the impacted RPC services should be firewalled off from the Internet.Further information on this exploit is available at : MS07-029